diff options
| author | Ogulcan Celik <ogulcancelik@gmail.com> | 2026-05-19 04:39:47 +0300 |
|---|---|---|
| committer | Ogulcan Celik <ogulcancelik@gmail.com> | 2026-05-19 04:39:47 +0300 |
| commit | ca9ed2b434f0a91e95cbc3949d11037345678589 (patch) | |
| tree | 66626f6f6702038b7a21681996b794f33061060f /.github/workflows/ci.yml | |
| parent | 5ef974e9e29eed69a64d50686a1b3b6eb2f3f94d (diff) | |
ci: harden workflow permissions
Diffstat (limited to '.github/workflows/ci.yml')
| -rw-r--r-- | .github/workflows/ci.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0d85dd9c..8427d384 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -8,6 +8,9 @@ on: paths-ignore: - "website/**" +permissions: + contents: read + concurrency: group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} cancel-in-progress: true @@ -23,6 +26,8 @@ jobs: steps: - name: Checkout uses: actions/checkout@v4 + with: + persist-credentials: false - name: Install just uses: extractions/setup-just@v3 |